$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft File: A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json) Hash identifier: vTUvHjyeV5EtrN3J+YLb+Xp2GL5FnTdVOOHmdP0Ulgo= Subject key identifier: 7E:7A:26:C1:9B:00:9C:8A:4C:3D:A6:A1:91:02:BF:04:8F:25:AB:5A Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Certificate serial: 0676B93FDAAE66032BE8DC2785085477FBBE15BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft Manifest number: 0142 Signing time: Sun 06 Apr 2025 03:31:13 +0000 Manifest this update: Sun 06 Apr 2025 03:26:13 +0000 Manifest next update: Wed 09 Apr 2025 11:37:13 +0000 Files and hashes: 1: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: DfpI3sfZfOso5gGyoS07WtJ/Jycy9ggknC4EuCpUXOM=) 2: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: Ldzq0WjI5kxA0xwZ9j/+HkbFA7bRhcVP8vfijlAcxEw=) 3: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: MKuGnpZ60DSK/b5WEF/hr8uWY44ucZ99U8eaS+KudvM=) 4: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: NZ3zgpSngsIOBUBuxKD8qjF4IFrIt5WPsm16vJBokXQ=) 5: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: cOnqdPMFYbqbFi/FA6Q7dA8kJTzM3+iE0W1mSgXK4nI=) 6: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: dGGtApiJINIxY52B2fxoF+GcPS5GqAkPbDC+3XTELZs=) 7: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: BXSq9b95eC9MSwvxuZ/AcJL572zXX4pRx3/J1qctsOw=) 8: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: qm6Wx8HHdMprTN2Xs+s/pxVtuwdrhpPAL17E7ApccPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 11:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:76:b9:3f:da:ae:66:03:2b:e8:dc:27:85:08:54:77:fb:be:15:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Validity Not Before: Apr 6 03:26:13 2025 GMT Not After : Apr 9 11:37:13 2025 GMT Subject: CN=7E7A26C19B009C8A4C3DA6A19102BF048F25AB5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:51:2e:c9:2e:7b:7b:0c:0c:9a:01:78:a4:1b: 94:3d:bd:22:cd:b3:4f:7a:22:e7:1d:ac:88:ea:b8: cc:90:d6:22:95:59:55:a6:d5:cc:aa:d4:fc:a9:9f: a6:c2:8b:b0:22:51:04:22:e8:a4:f1:4b:ad:79:7f: f1:58:61:08:e8:b0:ad:4c:58:b3:aa:86:4f:9a:15: 67:a3:5c:81:fd:28:4c:80:dd:1c:22:4f:08:b7:96: de:6d:47:b4:82:ed:27:c9:aa:68:12:94:1d:9a:12: 6b:bf:ab:fa:b3:cb:5d:4f:d8:90:87:4f:cf:2d:db: ba:ea:c2:8b:c8:5f:48:59:12:b2:4a:be:f8:5e:2f: 12:48:96:86:6e:c9:1d:72:64:db:c4:ac:66:90:31: 3c:7f:1f:b8:d0:b0:fa:97:e2:79:6f:21:dc:eb:6d: fa:69:3b:b7:64:22:2b:08:40:ea:bd:44:fd:22:c0: d7:83:a8:46:97:1f:00:4d:ee:43:04:5a:57:db:3d: 3d:80:60:3b:e0:d2:63:e5:f0:21:db:10:3d:43:3f: 3d:a4:48:a7:13:57:5d:d9:b7:10:b3:fa:24:d1:7d: a1:ff:33:59:4a:51:b1:e0:aa:31:ba:62:2e:65:c9: 83:41:90:77:53:5f:80:4c:ba:2d:f7:3f:cd:78:38: ec:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7A:26:C1:9B:00:9C:8A:4C:3D:A6:A1:91:02:BF:04:8F:25:AB:5A X509v3 Authority Key Identifier: keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:4c:13:70:df:57:ae:6a:02:59:1c:b8:b2:52:c1:a0:24:44: ed:23:f5:1f:98:c5:a4:41:e7:4a:ff:e3:0a:d1:91:8e:8b:98: e6:e7:45:ff:ff:66:9f:07:c2:f2:ad:0d:4e:8f:8f:bc:46:8b: 9e:2b:ba:23:91:37:fb:3f:dd:dc:c8:e6:3e:92:15:3e:6a:e5: 91:9b:2c:0c:4e:29:fa:19:1b:fc:27:5e:c3:ca:27:a0:0b:60: ef:d5:d4:02:60:5c:43:18:fe:81:29:59:4d:4b:a5:5d:e9:29: dc:33:71:f9:66:24:a4:b5:74:77:21:09:9c:64:70:5c:0e:1f: dc:5d:83:e5:35:0a:61:0c:cc:0b:e1:fa:a4:b1:e7:55:79:1a: 20:9f:cd:cd:5f:a3:53:72:0b:40:49:e0:81:28:cb:39:78:9c: 6b:50:18:57:24:43:df:95:f6:8d:c4:24:64:e5:10:a8:c7:e2: 13:c4:b1:93:f3:ce:dc:12:c6:a8:9e:1d:01:c3:a2:a5:5d:e5: 1d:aa:e4:0d:56:eb:e5:87:f5:e9:f1:36:4b:c6:4a:40:80:b1: 77:32:78:eb:7d:31:68:54:53:bd:cb:af:bf:17:3d:0a:45:22: 7b:66:0f:6a:37:4d:3b:ce:7e:01:ae:f8:1b:18:3a:7d:9a:51: 2e:d2:4c:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBna5P9quZgMr6NwnhQhUd/u+FbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2 MTBBRUM0OTAeFw0yNTA0MDYwMzI2MTNaFw0yNTA0MDkxMTM3MTNaMDMxMTAvBgNV BAMTKDdFN0EyNkMxOUIwMDlDOEE0QzNEQTZBMTkxMDJCRjA0OEYyNUFCNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUS7JLnt7DAyaAXikG5Q9vSLN s096IucdrIjquMyQ1iKVWVWm1cyq1Pypn6bCi7AiUQQi6KTxS615f/FYYQjosK1M WLOqhk+aFWejXIH9KEyA3RwiTwi3lt5tR7SC7SfJqmgSlB2aEmu/q/qzy11P2JCH T88t27rqwovIX0hZErJKvvheLxJIloZuyR1yZNvErGaQMTx/H7jQsPqX4nlvIdzr bfppO7dkIisIQOq9RP0iwNeDqEaXHwBN7kMEWlfbPT2AYDvg0mPl8CHbED1DPz2k SKcTV13ZtxCz+iTRfaH/M1lKUbHgqjG6Yi5lyYNBkHdTX4BMui33P814OOynAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfnomwZsAnIpMPaahkQK/BI8lq1owHwYDVR0j BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB RUM0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5 NDA2MTBBRUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlME3DfV65qAlkcuLJSwaAkRO0j9R+YxaRB 50r/4wrRkY6LmObnRf//Zp8HwvKtDU6Pj7xGi54ruiORN/s/3dzI5j6SFT5q5ZGb LAxOKfoZG/wnXsPKJ6ALYO/V1AJgXEMY/oEpWU1LpV3pKdwzcflmJKS1dHchCZxk cFwOH9xdg+U1CmEMzAvh+qSx51V5GiCfzc1fo1NyC0BJ4IEoyzl4nGtQGFckQ9+V 9o3EJGTlEKjH4hPEsZPzztwSxqieHQHDoqVd5R2q5A1W6+WH9enxNkvGSkCAsXcy eOt9MWhUU73Lr78XPQpFIntmD2o3TTvOfgGu+BsYOn2aUS7STLU= -----END CERTIFICATE-----Generated at Mon Apr 7 13:04:41 2025 by rpki-client